Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030323a3a2f33322d3438203d3e20323035343331.roa
File:                     326130363a613030323a3a2f33322d3438203d3e20323035343331.roa (raw, json)
Hash identifier:          KM0crYI+qo9SIr4bVrx2cWKt/tl9qjoctzx2m8EagTs=
Subject key identifier:   B3:DD:E1:D3:2B:73:93:B9:39:E6:1D:7D:9D:9B:9A:EA:74:0C:4E:46
Certificate issuer:       /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial:       64767F4897B644DE3A3A69B476414F86DF248A37
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030323a3a2f33322d3438203d3e20323035343331.roa
Signing time:             Fri 09 Dec 2022 05:19:26 +0000
ROA not before:           Fri 09 Dec 2022 05:14:26 +0000
ROA not after:            Fri 08 Dec 2023 05:19:26 +0000
asID:                     205431
IP address blocks:        2a06:a002::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:76:7f:48:97:b6:44:de:3a:3a:69:b4:76:41:4f:86:df:24:8a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
        Validity
            Not Before: Dec  9 05:14:26 2022 GMT
            Not After : Dec  8 05:19:26 2023 GMT
        Subject: CN=B3DDE1D32B7393B939E61D7D9D9B9AEA740C4E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:b6:8e:99:92:e7:b9:ae:ff:14:87:ac:57:
                    42:6a:70:24:aa:ba:bd:cf:4c:96:1f:ff:cc:1b:ec:
                    6d:eb:21:89:e9:73:2a:60:3b:ac:bb:b1:9c:86:39:
                    7b:99:83:2d:36:50:eb:ea:92:ca:84:39:f5:da:d1:
                    ac:d7:3c:ce:96:77:55:78:07:b5:79:49:d2:67:71:
                    f3:3e:9e:81:1f:1e:75:dd:a3:04:f3:6e:2e:17:7f:
                    83:50:64:35:fd:53:d3:1f:b2:73:e0:76:f0:d3:73:
                    98:1b:00:24:37:b2:98:8a:16:ef:de:90:9c:04:10:
                    9c:0f:47:4a:05:6d:0a:08:6e:7f:59:c7:e9:ec:8e:
                    d8:be:2f:c8:3d:a2:2e:2f:b9:29:7d:1f:1d:57:ad:
                    ab:d0:1e:37:d0:aa:7c:5a:7c:4e:2e:e3:5e:01:73:
                    28:27:e0:01:ae:92:03:f4:d9:0a:75:1f:bb:a7:4c:
                    f3:1e:1d:8d:eb:65:50:7a:c1:74:99:4c:3f:96:e3:
                    60:28:20:ce:46:50:bb:87:5f:0b:78:61:cc:07:65:
                    79:0b:0e:4f:d4:ae:b4:ce:bc:a3:2e:91:46:ca:16:
                    91:a6:37:5a:80:9e:56:e0:b7:38:89:bc:9a:41:93:
                    92:91:6a:d1:a5:08:21:c1:21:62:c6:fd:34:55:04:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DD:E1:D3:2B:73:93:B9:39:E6:1D:7D:9D:9B:9A:EA:74:0C:4E:46
            X509v3 Authority Key Identifier:
                keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030323a3a2f33322d3438203d3e20323035343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:02:14:dd:69:ee:57:e5:32:84:18:ba:28:c1:4c:a4:4c:85:
         82:9c:80:3d:94:5c:36:85:66:27:85:d8:ac:50:73:c7:cd:5f:
         29:dc:29:ed:32:ba:40:30:8c:18:a4:42:c0:3d:4f:d5:36:68:
         43:e0:4d:89:e9:f3:7f:d3:e3:ad:bd:4c:03:73:99:08:56:4f:
         5d:69:d9:72:1b:d2:02:f6:f7:51:bc:7a:cf:2f:5a:ae:bf:d6:
         cb:93:8f:a1:73:4b:f5:86:4d:0e:08:d5:0b:03:a4:c7:e0:c2:
         8a:09:0e:c4:8e:3d:3e:45:bd:72:4a:79:79:ca:d7:ff:c4:c7:
         5e:26:b7:a2:2d:be:a7:51:fe:8e:0a:2c:ed:21:f6:bf:3b:3f:
         39:9b:c8:8d:37:b6:20:51:92:2b:88:c8:86:89:1a:3d:e2:22:
         aa:e0:fe:67:4b:a9:9c:bd:5f:f0:b0:2a:fb:c6:06:f0:d9:1c:
         68:64:f5:ae:12:01:23:2c:83:40:8b:37:f3:75:ed:2e:cf:8a:
         51:83:19:51:48:ca:67:e1:0c:8d:dd:49:0c:ff:b5:0a:2d:39:
         d7:13:51:c8:b6:ea:f4:01:3f:83:3f:e1:5a:ff:b6:27:34:7c:
         be:6c:f5:b5:d8:fa:16:af:f1:21:d9:3a:15:87:a0:40:10:1a:
         3f:86:9d:da
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUZHZ/SJe2RN46Omm0dkFPht8kijcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVjOGM5OTAwYjU2YmJkYjAzNmE0MzQxMDU5ZTE3MDU0
MDFkMGEzNTAeFw0yMjEyMDkwNTE0MjZaFw0yMzEyMDgwNTE5MjZaMDMxMTAvBgNV
BAMTKEIzRERFMUQzMkI3MzkzQjkzOUU2MUQ3RDlEOUI5QUVBNzQwQzRFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5F7aOmZLnua7/FIesV0JqcCSq
ur3PTJYf/8wb7G3rIYnpcypgO6y7sZyGOXuZgy02UOvqksqEOfXa0azXPM6Wd1V4
B7V5SdJncfM+noEfHnXdowTzbi4Xf4NQZDX9U9MfsnPgdvDTc5gbACQ3spiKFu/e
kJwEEJwPR0oFbQoIbn9Zx+nsjti+L8g9oi4vuSl9Hx1XravQHjfQqnxafE4u414B
cygn4AGukgP02Qp1H7unTPMeHY3rZVB6wXSZTD+W42AoIM5GULuHXwt4YcwHZXkL
Dk/UrrTOvKMukUbKFpGmN1qAnlbgtziJvJpBk5KRatGlCCHBIWLG/TRVBKL/AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUs93h0ytzk7k55h19nZua6nQMTkYwHwYDVR0j
BBgwFoAUdcjJkAtWu9sDakNBBZ4XBUAdCjUwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvNzVDOEM5OTAwQjU2QkJEQjAzNkE0MzQxMDU5RTE3MDU0MDFE
MEEzNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjakprQXRXdTlzRGFrTkJC
WjRYQlVBZENqVS5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4ZpcnN5
bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29tL3JlcG8vWkFQUElFLVJQS0kvMi8zMjYx
MzAzNjNhNjEzMDMwMzIzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjMwMzUzNDMz
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAqBqACMA0GCSqGSIb3DQEBCwUAA4IBAQBBAhTdae5X5TKE
GLoowUykTIWCnIA9lFw2hWYnhdisUHPHzV8p3CntMrpAMIwYpELAPU/VNmhD4E2J
6fN/0+OtvUwDc5kIVk9dadlyG9IC9vdRvHrPL1quv9bLk4+hc0v1hk0OCNULA6TH
4MKKCQ7Ejj0+Rb1ySnl5ytf/xMdeJreiLb6nUf6OCiztIfa/Oz85m8iNN7YgUZIr
iMiGiRo94iKq4P5nS6mcvV/wsCr7xgbw2RxoZPWuEgEjLINAizfzde0uz4pRgxlR
SMpn4QyN3UkM/7UKLTnXE1HItur0AT+DP+Fa/7YnNHy+bPW12PoWr/Eh2ToVh6BA
EBo/hp3a
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:50 2025 by rpki-client